6 jobs found

The Role: Design, build and operate CyberArk Secure Cloud Access (SCA) & CyberArk Secure Infrastructure Access (SIA) Hands-on experience with CyberArk Secure Cloud Access (SCA). Hands-on experience with CyberArk Secure Infrastructure Access (SIA). Proven experience delivering cloud-based privileged access in Azure and/or AWS. Strong understanding of: Web-based console access (HTTPS) Ephemeral access models Credential life cycle and password rotation Experience with approval-driven access and governance workflows CDE CyberArk Privilege Cloud. Security Clearance is advantageous not essential. This role is remote based with UK wide travel as required.

SC Cleared Identity Consultant: Identity, CyberArk, IDAM, IGA Our enterprise client is looking for a SC Cleared Identity Consultant to join their team. Start Date: ASAP Duration: 100 days Total Daily Earnings: Competitive (includes rolled up holiday) IR35 Status: Inside Location: Remote with some travel to UK wide offices NOTE: Active SC Clearance is highly desirable. Responsibilities: Design, build and operate CyberArk Secure Cloud Access (SCA) & CyberArk Secure Infrastructure Access (SIA) Hands on experience with CyberArk Secure Cloud Access (SCA). Hands on experience with CyberArk Secure Infrastructure Access (SIA). Hands on experience with IDAM based with Sailpoint and IGA Proven experience delivering cloud based privileged access in Azure and/or AWS. Strong understanding of: Web based console access (HTTPS) Ephemeral access models Credential life cycle and password rotation Experience with approval driven access and governance workflows CDE CyberArk Privilege Cloud. To apply for this SC Cleared Identity Consultant contract job, please click the button below and submit your latest CV. Curo Services endeavours to respond to all applications, however this may not always be possible during periods of high volume. Thank you for your patience. Curo Services is a trading name of Curo Resourcing Ltd and acts as an Employment Business for contract and temporary recruitment as well as an Employment Agency in relation to permanent vacancies.

Damia Group are supporting a leading global technology organisation with the appointment of an experienced BeyondTrust Endpoint Privilege Management (EPM) Engineer. This is an exciting opportunity to join a large-scale, highly customised EPM environment operating within a secure enterprise setting. The successful candidate will work closely with Application Packaging, Endpoint Engineering and Security teams, providing expert-level administration, troubleshooting and policy engineering across the BeyondTrust EPM platform. Candidates with strong CyberArk Endpoint Privilege Manager experience will also be considered, particularly those with a strong endpoint security background who are willing to cross-train into BeyondTrust. Location: Inverness or Manchester Working Pattern: On-site within secure facilities Shift Pattern: 24x7 operational rota The Role You will play a key role in maintaining and developing a complex enterprise EPM environment, ensuring applications can be deployed securely while maintaining appropriate privilege and application control policies. Key Responsibilities Administer, support and maintain a highly customised BeyondTrust EPM environment. Design, implement and maintain policies covering privilege elevation, application control and allowlisting. Work closely with Application Packaging and Endpoint Engineering teams to support application deployment. Analyse application behaviour and identify appropriate privilege management requirements. Troubleshoot complex EPM issues affecting application deployment, endpoint security and user productivity. Develop, test and implement EPM policy changes while maintaining security and operational stability. Support the onboarding of new applications into the EPM environment. Investigate and resolve incidents relating to privilege elevation, application execution and endpoint control. Collaborate with packaging, infrastructure and security teams to ensure application compatibility. Carry out root cause analysis and implement appropriate remediation. Maintain technical documentation, procedures, support guides and policy standards. Contribute to continuous improvement and optimisation of the EPM platform. Participate in a 24x7 operational support rota, including out-of-hours support where required. Essential Skills & Experience Strong hands-on experience administering and engineering BeyondTrust Endpoint Privilege Management (EPM) . Strong understanding of Windows endpoint security architecture . Proven experience creating, modifying and troubleshooting BeyondTrust EPM policies. Experience supporting application packaging and software deployment . Strong knowledge of: Windows Desktop Operating Systems Application Control Privilege Elevation Endpoint Security Software Packaging & Deployment Group Policy Administration Ability to assess application requirements and develop appropriate privilege management solutions. Experience working with highly customised enterprise EPM environments. Excellent troubleshooting and root cause analysis capabilities. Experience working within secure, controlled or highly regulated environments. Strong technical documentation and communication skills. Ability to work independently within a complex operational environment. Desirable Skills CyberArk Endpoint Privilege Manager experience. Experience migrating between EPM platforms. Microsoft Intune, MECM/SCCM or equivalent endpoint management experience. PowerShell scripting and automation. Experience supporting large-scale enterprise endpoint environments. ITIL-based operational experience. Previous experience working within secure facilities or restricted-access environments. Please note: Candidates must be able to work on-site from either Inverness or Manchester and be willing to participate in a 24x7 support rota . Damia Group Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept our Data Protection Policy which can be found on our website. Please note that no terminology in this advert is intended to discriminate on the grounds of a person's gender, marital status, race, religion, colour, age, disability or sexual orientation. Every candidate will be assessed only in accordance with their merits, qualifications and ability to perform the duties of the job. Should the role require the successful candidate to undergo and be eligible for UK Security Vetting. Clearance sponsorship will be provided where required. Due to the nature of the work, candidates should meet the relevant residency requirements. If applicable, Reserved Post nationality restrictions will be confirmed by the client. Damia is committed to inclusive recruitment and welcomes applicants from all backgrounds. Damia Group is acting as an Employment Business in relation to this vacancy and in accordance to Conduct Regulations 2003.

Seeking an experienced CyberArk Consultant with a proven track record of designing, implementing, and deploying CyberArk Privileged Access Management (PAM) solutions in enterprise environments. Key Requirements Strong solution architecture experience with enterprise security platforms. Hands-on experience implementing and deploying CyberArk PAM from design through production. Demonstrated experience delivering CyberArk implementations for at least one previous organization, with end-to-end ownership of the deployment. Strong knowledge of CyberArk components, including the Digital Vault, PVWA, CPM, PSM, and Privileged Threat Analytics (PTA) (where applicable). Experience integrating CyberArk with enterprise infrastructure such as Active Directory, LDAP, SIEM, IAM, and cloud platforms. Ability to define architecture, lead technical design workshops, and provide implementation best practices. Strong troubleshooting, migration, and upgrade experience for CyberArk environments. Excellent stakeholder management and communication skills, with the ability to work across security, infrastructure, and application teams. Preferred CyberArk certifications (eg, Defender, Sentry, or Guardian). Experience with hybrid or multi-cloud environments (eg, AWS, Azure, GCP). Knowledge of broader identity and privileged access management technologies.

Job Title: Discovery Engineer - Architecture & Flow Management Industry: Banking/Financial Services (Corporate & Institutional Banking) Location: London (50% onsite) Contract: 6 months initial, with a view to extend Rate: Competitive | Inside IR35 About the Role Our client, a leading global investment bank, is looking for an experienced engineer to manage the architecture, network flows, and rationalisation of their global BMC Helix Discovery deployment. Main Responsibilities Lead architecture and network flow management project activities, reporting progress to the Discovery team manager Perform recurring platform health checks and use results to shape new project work Collaborate with the wider team on architecture direction, enhancements, and fixes Build and maintain key stakeholder relationships to deliver project outcomes Understand external (non-BMC) tools and processes critical to project delivery Provide clear, weekly progress updates across multiple concurrent project streams Improve and redefine process activities where applicable Implement automation to improve efficiency and delivery time Research new technologies to enhance the discovery service Provide L2/L3 support for incidents, changes, and requests Approx. 80% project-focused, 20% BAU . Essential Experience Experience within a BMC Discovery environment (consultant, contractor, or permanent) Excellent understanding of BMC Discovery at architectural and configurational level Certifications desirable but not critical - strong field experience matters more Role-Specific Technical Skills & Knowledge Expert knowledge of BMC Discovery (formerly ADDM) - deployment, architecture, configuration best practice, and rationalisation principles Communication & access protocols: SSH, HTTPS, DCOM, REST API BMC Discovery connection protocols: UNIX Shell, WMI, PowerShell Strong understanding of BMC Discovery pattern language (TPL) Strong understanding of the BMC Discovery data model & query language Administrative knowledge of Linux, Windows, virtualisation, databases, networking & directory services Desirable Technical Skills & Knowledge Python DevOps - Git, Bitbucket, Jenkins, Ansible Tower Virtualisation - VMware OpenStack Generic SQL Containerisation solutions Access management tools - CyberArk Personal Attributes Excellent communication and internal networking Determination, motivation, and fast learning Adaptability and multi-tasking Strong team player with attention to detail Interested? If you have hands-on BMC Discovery experience and are looking for your next contract opportunity, we'd love to hear from you. Guidant, Carbon60, Lorien & SRG - The Impellam Group Portfolio are acting as an Employment Business in relation to this vacancy.

Job Title: Lead Security Solution Architect- PAM Location: Hybrid-London, UK (Days/Week Onsite) Duration: 6months+ 550GBP/Day Inside IR35 Project Overview CLIENT is working on a strategic Identity and Access Management programme and is re-shaping the way Authentication, Federation, Privileged Access Management, Access Governance, Secrets Management and API Security is done across the bank. One of the pillars of that programe is Privileged Access Management (PAM). CLIENT is working on uplifting controls and capabilities in privileged access for the Group and introducing the strategic password vaulting solution that will enable to meet strategic requirements. We are seeking an experienced Lead Security Solution Architect that can complement an existing team of Solution Architects to progress with designs of different components of the PAM solution and other supporting systems it will need to integrate with as part of the end-to-end journey. Security Solution Architects manage end-to-end solution design and are responsible for delivering architecture design documents in line with functional and non-functional business requirements, strategies, principles, standards, and patterns. Alongside the creation of high-level designs, Security Solution Architects will be required to record key decisions, design deviations, and technical risks and issues where appropriate. Security Solution Architects should be comfortable presenting and sharing solutions at design authorities and senior leadership & stakeholders. The Lead Security Solution Architect will provide technical thought leadership and direction to their project team and may represent the project/programme as subject matter expert. This role will require someone experienced in managing a team of on-shore and off-shore resources to deliver High- and Low-level designs to the required quality and standard. Principal Preferred Requirements Cybersecurity Expertise: Significant experience and proven technical depth within one of the following domains of cybersecurity; security operations & incident response, threat & vulnerability management, identity & access management, cryptography, infrastructure, network, application, data, cloud Broad background across information technology with the ability to communicate clearly with non-security technical SMEs at a comfortable level Experience in both operational and transformation cybersecurity roles or a clear working understanding of both perspectives Experience working in large-scale IT transformation programmes Experience working with PAM solutions such as CyberArk, Centrify, Delinea and OneIdentity Preparing end-to-end configuration of the strategic PAM capability - including on-prem deployments as well as Cloud native toolings Assisting in preparation of demonstrable journeys on the configured PAM tooling Platform & Technology: BizzDesign, Archi, or generic UML visualisation experience for high-level designs High proficiency and expertise in Jira for project & tasks management Working proficiency in Confluence for documentation Principal Accountabilities and Responsibilities Architecture & Design: Produce, manage, and update end-to-end solution designs in line with reference architecture & business requirements (including High and Low Level Designs Articulate and publish key design decision records and options to ensure all solutions follow a logical, transparent decision-making process Articulate, publish, and ensure approval of any design deviations resulting in technical debt Ensure any technical risks or issues arising from a solution design are recorded and mitigated. Produces, manages and translates the requirements into the architecture for that solution, ensuring technology and services meet the customer needs and expected business outcomes Ensures the design of the solutions are efficient, timely and cost effective throughout the project life cycle Clear understanding of both the motivations of the business and technical security Promote strong documentation and clerkship Governance: Ensures all high-level designs, architecture patterns, decision records, deviation requests, and technical risks or issue records undergo architectural and project governance processes Ensure all architecture artefacts undergo appropriate peer review prior to design authority presentation Present publications at technical design authorities for input, feedback, and approval Risk and Dependency Management: Effectively manages and escalates both technical and project risks or issues Articulates solutions and remediation steps to technical risks & issues Ability to map design decisions to resultant technical risks & issues to articulate the cause and rationale which leads to any negatively impacting change Leadership & Teamwork Provides technical thought leadership to the Design Team and the Project Ability to manage a project team of technical architects, engineers, and/or analysts Ability to take a deputised role in programme management-related tasks where necessary Qualifications & Certifications: Masters or doctorate degree in cybersecurity, computer science, software engineering, or related field CISSP/CISM certification or other broad cybersecurity industry-recognised certificate SABSA or TOGAF certified preferred Priyanka Sharma Senior Delivery Consultant